[ga] Many MoD IT Systems Do Not Meet Security Guidelines

["Jeffrey A. Williams" <jwkckid1@xxxxxxxxxxxxx>]

All,

  As I reported more than a year and a half ago, co.uk zone
was inherently insecure.  It also seems that the UK's government
web sites and respective Domains are also perhaps even worse.

  I hope in the new Obama administration that his new nominated
secretary of state will be able to be effectively persuasive or
insistent to convince the UK government to get it cleaned up
ASAP, and that DHS and DOC will take precautionary steps
to mitigate the potential transferable damage such irresponsible
IT security from our most trusted ally and work with the UK
government IT security officials and commercial industry in the
UK to rapidely improve to a significant degree such huge security
holes.

See:
(January 14 & 15, 2009)
Nearly three-quarters of IT systems tested thus far at the UK Ministry
of Defence (MoD) and associated agencies do not meet established
security guidelines, according to a data handling review.  The security
guidelines were established last summer following a number of publicized

and embarrassing data security blunders at government departments.  The
MoD has tested just 58 percent of its systems against the standards.  In

a separate but related story, the MoD has confirmed that malware
infections have shut down "a small number" of IT systems, including
networks on Royal Navy warships.
http://news.zdnet.co.uk/security/0,1000000189,39591619,00.htm
http://www.vnunet.com/computing/news/2234069/quarter-mod-systems-tested-far

http://www.theregister.co.uk/2009/01/15/royal_navy_email_virus_outage/

Regards,

Spokesman for INEGroup LLA. - (Over 284k members/stakeholders strong!)
"Obedience of the law is the greatest freedom" -
   Abraham Lincoln
"YES WE CAN!"  Barack ( Berry ) Obama

"Credit should go with the performance of duty and not with what is
very often the accident of glory" - Theodore Roosevelt

"If the probability be called P; the injury, L; and the burden, B;
liability depends upon whether B is less than L multiplied by
P: i.e., whether B is less than PL."
United States v. Carroll Towing  (159 F.2d 169 [2d Cir. 1947]
===============================================================
Updated 1/26/04
CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS.
div. of Information Network Eng.  INEG. INC.
ABA member in good standing member ID 01257402 E-Mail
jwkckid1@xxxxxxxxxxxxx
My Phone: 214-244-4827